Lucene search
K

4304 matches found

CNNVD
CNNVD
added 2025/04/08 12:0 a.m.2 views

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00247EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.3 views

Rockwell Automation Arena 缓冲区错误漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00249EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.3 views

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

8.5CVSS7.4AI score0.00249EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.3 views

PT-2025-15575 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: The issue is related to a heap-based buffer overflow in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This can enable remote attackers to...

7.8CVSS8.8AI score0.00988EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.4 views

PT-2025-15595 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Description: The issue is related to a use after free condition in Microsoft Office Excel, which allows an unauthorized attacker to execute code locally. This could potentially lead to...

7.8CVSS8.8AI score0.00606EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.3 views

PT-2025-15553 · Microsoft · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: Windows Shell affected versions not specified Description: The issue is related to a use after free condition in the Windows Shell, which allows an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

7.8CVSS8.5AI score0.00719EPSS
Exploits0References9
OSV
OSV
added 2025/04/07 8:15 p.m.4 views

AZL-59727 CVE-2025-29481 affecting package libbpf for versions less than 1.2.2-2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS7.5AI score0.00201EPSS
Exploits1References1
OSV
OSV
added 2025/04/07 8:15 p.m.6 views

AZL-61765 CVE-2025-29481 affecting package pcp 6.3.2-1

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS7.6AI score0.00201EPSS
Exploits1References1
OSV
OSV
added 2025/04/07 8:15 p.m.8 views

CVE-2025-29482

Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO Sample Adaptive Offset processing of libde265...

6.2CVSS7.8AI score
Exploits0References1
OSV
OSV
added 2025/04/07 8:15 p.m.4 views

AZL-59737 CVE-2025-29481 affecting package dwarves for versions less than 1.25-2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS7.6AI score0.00201EPSS
Exploits1References1
OSV
OSV
added 2025/04/07 8:15 p.m.4 views

AZL-59719 CVE-2025-29481 affecting package libbpf for versions less than 1.0.1-2

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS6.1AI score0.00201EPSS
Exploits1References1
OSV
OSV
added 2025/04/07 8:15 p.m.2 views

DEBIAN-CVE-2025-29481

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS7.7AI score0.00201EPSS
Exploits1References1
OSV
OSV
added 2025/04/07 8:15 p.m.1 views

UBUNTU-CVE-2025-29482

Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO Sample Adaptive Offset processing of libde265...

6.2CVSS6.2AI score0.002EPSS
Exploits1References3
OSV
OSV
added 2025/04/07 8:15 p.m.1 views

UBUNTU-CVE-2025-29481

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

6.2CVSS7.6AI score0.00201EPSS
Exploits1References3
OSV
OSV
added 2025/04/07 3:15 a.m.1 views

CVE-2025-22851

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow...

8.8CVSS6.3AI score0.00149EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.4 views

PT-2025-15449 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to a threat actor being able to write outside of the allocated memory buffer. This is a result of improper validation of...

8.5CVSS6.9AI score0.00249EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.4 views

PT-2025-15443 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to an uninitialized pointer, resulting from improper validation of user-supplied data. This allows a threat actor to disclose...

8.5CVSS6.9AI score0.00247EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.2 views

PT-2025-15455 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to a threat actor being able to read outside of the allocated memory buffer, resulting from improper validation of user-supplied...

8.5CVSS6.8AI score0.00249EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.3 views

PT-2025-15283 · Libbpf +1 · Libbpf +1

Name of the Vulnerable Software and Affected Versions: libbpf version 1.5.0 Description: The issue is a buffer overflow vulnerability that allows a local attacker to execute arbitrary code via the bpf object init prog function of libbpf. Recommendations: For libbpf version 1.5.0, as a temporary...

6.2CVSS8AI score0.00201EPSS
Exploits1References15
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.4 views

PT-2025-15450 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to a threat actor being able to write outside of the allocated memory buffer, resulting from improper validation of user-supplied...

8.5CVSS6.9AI score0.00249EPSS
Exploits0References7
Rows per page
Query Builder